{"profile_properties":{"primaryPhone":"(202) 725-7476","city":"Washington","samAccountName":"dgraves","dhs_ial":"1","managerId":"00u1v5iguqeHlIUl74h7","adPrimarySID":"S-1-5-21-3516912911-3241761273-3555923892-202962","upnsuffix":"ICE.DHS.GOV","physicalDeliveryOfficeName":"PTN - POTOMAC CENTER NORTH","login":"Derrick.Graves@ice.dhs.gov","mobilePhone":"(202) 725-7476","lastName":"GRAVES","ntdomain":"IRMNET","upnsuffix":"ICE.DHS.GOV","displayName":"Graves, Derrick","streetAddress":"500 12Th Street Sw","modifyTimestamp":"2026-03-18T12:27:22.108Z","secondEmail":"Derrick.Graves@ice.dhs.gov","pivExceptDate":"08/13/2026","ntaccount":"IRMNET\\dgraves","pivExceptionCount":"1","almid":"ICE-0078868254","edipi":"0090019357","actualDN":"CN=Graves\\, Derrick,OU=Users,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","memberOf":["Workforce-Utilization-Reporting","Zscaler-ZBI-Test-Group","UEM M&A Users","Intercede DPC","Bitlocker-USB-Inclusion-User-AD","SP Tasker User Group","All OCIO Users","Teams OCIO Users","SL-ThreatHunt","\\#PluralSight Users","Axonius Basic Users","\\#Tasker ServiceNow Users","OCIOTrendAnalysis","OCIO IAD RED REQUEST SR APPROVERS","Adex_Cofense_GPO_test_group","Adobe-Acrobat Pro DC Users","Splunk-CIO-Report","\\#ICEHQERG","\\#ICE IAD CDI Feds","coll_OCIO","MGMT IAD Approvers","ICEOCIOFedsContractors","CDO-Splunk-Users","ICATT Users","SOC-PT","OCIO-ChangeManagementFireWallRequestsSR Approvers","\\#CTI Updates","\\#ICE IAD IS OPERATIONS CENTER","OCISO-Dev","Zscaler-ZIA-FCP-Allow-EXE-Download","\\#ICE OCISO Project DC","QARIARS-IRMNET-All-Audit","ICE SOCIB","^ptn-ocio","HQIRM_SOC_CSIRC_T3","TWP760D IAD Users","HIRM_SAFE_USERS","HQIRM_IAD_FULL_ACCESS","HQIRM_Everyone","HQIRM_NT_SERVER","\\#ICE OCISO PROJECT ALM-LogMgmt","HQIRM_IAD_CERTSRESUME","\\#ICE SOC Application Users","\\#ICE OCIO IAD","\\#ICE OCIO IAD GOVERNMENT","HQIRM_ISA_LIBRARY_READ","\\#ICE OCIO-Government-2","IAD SR Approvers","CISO","OCIO OGA OCISSO Final Approval"],"actualMemberOf":["CN=Workforce-Utilization-Reporting,OU=Splunk,OU=Cyber Defense Engineering,OU=OCIO-IAD,OU=Applications,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=Zscaler-ZBI-Test-Group,OU=SOC Managed,OU=Groups,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=UEM M&A Users,OU=Prod Security Groups,OU=Production,OU=UEM,OU=OCIO-NEDB,OU=Applications,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=Intercede DPC,OU=GOOD,OU=OCIO-NEDB,OU=Applications,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=Bitlocker-USB-Inclusion-User-AD,OU=Groups,OU=EOW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=SP Tasker User Group,OU=Groups,OU=WAS,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=All OCIO Users,OU=GOOD,OU=OCIO-NEDB,OU=Applications,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=Teams OCIO Users,OU=Groups,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=SL-ThreatHunt,OU=Swimlane,OU=Cyber Defense Engineering,OU=OCIO-IAD,OU=Applications,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=\\#PluralSight Users,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=Axonius Basic Users,OU=Axonius,OU=Cyber Defense Engineering,OU=OCIO-IAD,OU=Applications,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=\\#Tasker ServiceNow Users,OU=Groups,OU=WAS,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=OCIOTrendAnalysis,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=OCIO IAD RED REQUEST SR APPROVERS,OU=ServiceNow,OU=Applications,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=Adex_Cofense_GPO_test_group,OU=Groups,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=Adobe-Acrobat Pro DC Users,OU=Groups,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=Splunk-CIO-Report,OU=Splunk,OU=Cyber Defense Engineering,OU=OCIO-IAD,OU=Applications,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=\\#ICEHQERG,OU=Groups,OU=WAS,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=\\#ICE IAD CDI Feds,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=coll_OCIO,OU=Groups,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=MGMT IAD Approvers,OU=ServiceNow,OU=Applications,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=ICEOCIOFedsContractors,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=CDO-Splunk-Users,OU=Splunk,OU=Cyber Defense Engineering,OU=OCIO-IAD,OU=Applications,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=ICATT Users,OU=ICATT,OU=Applications,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=SOC-PT,OU=ServiceNow,OU=Applications,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=OCIO-ChangeManagementFireWallRequestsSR Approvers,OU=ServiceNow,OU=Applications,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=\\#CTI Updates,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=\\#ICE IAD IS OPERATIONS CENTER,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=OCISO-Dev,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=Zscaler-ZIA-FCP-Allow-EXE-Download,OU=SOC Managed,OU=Groups,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=\\#ICE OCISO Project DC,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=QARIARS-IRMNET-All-Audit,OU=ActiveRoles,OU=Groups,OU=Enterprise,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=ICE SOCIB,OU=Groups,OU=EOW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=^ptn-ocio,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=HQIRM_SOC_CSIRC_T3,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=TWP760D IAD Users,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=HIRM_SAFE_USERS,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=HQIRM_IAD_FULL_ACCESS,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=HQIRM_Everyone,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=HQIRM_NT_SERVER,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=\\#ICE OCISO PROJECT ALM-LogMgmt,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=HQIRM_IAD_CERTSRESUME,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=\\#ICE SOC Application Users,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=\\#ICE OCIO IAD,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=\\#ICE OCIO IAD GOVERNMENT,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=HQIRM_ISA_LIBRARY_READ,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=\\#ICE OCIO-Government-2,OU=Groups,OU=COW,OU=ICE,OU=BTS,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=IAD SR Approvers,OU=ServiceNow,OU=Applications,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=CISO,OU=ServiceNow,OU=Applications,DC=irmnet,DC=ds2,DC=dhs,DC=gov","CN=OCIO OGA OCISSO Final Approval,OU=ServiceNow,OU=Applications,DC=irmnet,DC=ds2,DC=dhs,DC=gov"],"implicitUPN":"dgraves@IRMNET.DS2.DHS.GOV","email":"Derrick.Graves@ice.dhs.gov","middleName":"VON","title":"Chief, SOC & Incident Response","citizenship":"TRUE","firstName":"DERRICK","emailKey":"0090019357IRMNET","zipCode":"20536","manager":"Heather.Lynch@ice.dhs.gov","fullName":"DERRICK GRAVES","lastPIVException":"08/13/2026","department":"ICE","countryCode":"US","state":"DC","dhs_aal":"1","pivUPN":"0090019357@ICE.DHS.GOV","tieUPN":"void@void","component":"ICE","dhsattribute13":"0090019357@ICE.DHS.GOV","implicitupn":"dgraves@IRMNET.DS2.DHS.GOV","pivException":true,"actualUserPrincipalName":"0090019357@ICE.DHS.GOV"},"system_properties":{"password_changed":null,"id":"00u1v4ya5lAQjO2HW4h7","last_updated":"2026-08-13T08:31:57.000Z","created":"2022-09-15T16:25:41.000Z","credentials":{"password":false,"recovery_question":{},"provider":{"name":"OKTA","type":"OKTA"}},"status":"ACTIVE","last_login":"2025-12-16T14:43:41.000Z","status_changed":"2022-09-15T16:25:41.000Z","activated":"2022-09-15T16:25:41.000Z"},"statusCode":200}